Eipstackgroup · Openemr · CVE-2026-10703
**Name of the Vulnerable Software and Affected Versions**
EIPStackGroup OpENer versions prior to 2.3.1
**Description**
A use after free issue exists in the `CreateMessageRouterRequestStructure()` function within the `cipmessagerouter.c` file of the SendRRData Handler component. This flaw allows for remote exploitation.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, consider restricting the use of the `CreateMessageRouterRequestStructure()` function to minimize the risk of exploitation.